An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
Repository Index
58,136 visible repositories in the index
1–6 of 6 · Most stars
DECAF (short for Dynamic Executable Code Analysis Framework) is a binary analysis platform based on QEMU. This is also the home of the DroidScope dynamic Android malware analysis platform. DroidScope is now an extension to DECAF.
- binary-analysis
- taint-analysis
Automatic and platform-independent unpacker for Windows binaries based on emulation
- reverse-engineering
- unpacker
- pefile
- windows
The Multiplatform Linux Sandbox
Incident Response - Fast suspicious file finder
- dfir
- investigation
- incident-response
- threat-hunting
Docker image gathering packers and tools for making datasets of packed executables and training machine learning models for packing detection
- docker-image
- executable-packing
- malware-packers
- research-platform